Menu Icons by Themeisle – Add Icons to Navigation Menus

Menu Icons by Themeisle – Add Icons to Navigation Menus has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Missing Authorization.

Every one of the 3 issues recorded for Menu Icons by Themeisle – Add Icons to Navigation Menus has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Menu Icons by Themeisle – Add Icons to Navigation Menus is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Menu Icons by Themeisle – Add Icons to Navigation Menus vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-1755

Menu Icons by ThemeIsle <= 0.13.20 - Authenticated (Author+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2026-02-03 09:50	Menu Icons by ThemeIsle <= 0.13.20 - Authenticated (Author+) Stored Cross-Site Scripting Menu Icons by Themeisle <= 0.13.20	`CVE-2026-1755`	6.4 Medium	lucsob	Yes
2024-05-15 00:00	Menu Icons by ThemeIsle <= 0.13.13 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload Menu Icons by Themeisle <= 0.13.13	`CVE-2024-4635`	6.4 Medium	wesley (wcraft)	Yes
2024-02-01 00:00	ThemeIsle SDK <= Various Versions - Missing Authorization Menu Icons by Themeisle <= 0.13.8	`CVE-2024-1047`	5.3 Medium	Francesco Carlucci	Yes

Showing 1–3 of 3 reports

Latestv0.13.24

Menu Icons by Themeisle – Add Icons to Navigation Menus

Author

Themeisle

4.9(849)

98/100

Last Updated

2026-09-02 (11d ago)

Active Installs

100,000+

Downloads

4,603,397

Requires WP

4.7+

Requires PHP

Tested up to

WP 7.1

Created

2014-02-20 (13y ago)

This plugin gives you the ability to add icons to your menu items, similar to the look of the latest dashboard menu. Usage After the plugin is activated, go to Appearance > Menus to edit your menus Enable/Disable icon types in “Menu Icons Settings” meta box Set default settings for current nav menu; these settings will be inherited by the newly added menu items Select icon by clicking on the “Select icon” link Save the menu Supported icon types Dashicons (WordPress core icons) Elusive Icons by Aristeides Stathopoulos Font Awesome by Dave Gandy Foundation Icons by Zurb Genericons by Automattic Fontello icon packs TI Icons icon pack by ThemeIsle Image (attachments) SVG (attachments) Planned supported icon types Image (URL) Compatible themes Menu icons works with most of the themes out there, especially with popular ones like Twenty Seventeen or Hestia. Development of this plugin is done on GitHub. Pull requests welcome. Please see issues reported there before going to the plugin forum. If you like this plugin, then consider checking out our other projects: CodeinWP Blog – Designer’s Guide To WordPress Revive.Social – Social Media Tools JustFreeThemes – Free WordPress Themes directory

View on WordPress.org